Am I expected to be able to run this in production on the backend, or do I still need to transpile and bundle? Do we expect the performance and memory overhead to be negligible. What would be the expectations on terms of added attack surface?
This is irrelevant since your steam game license applies to all subsequent versions. The argument is it's immoral sell version specific licenses with no way to get to said specific version.